🔐 Sid Gifari File Manager Pro
v8.0.5 | 2026-08-08 18:43:31 | PHP 8.2.32
📂
/ (Root)
/
opt
/
alt
/
python38
/
lib64
/
python3.8
/
site-packages
/
cryptography
/
x509
/
__pycache__
📍 /opt/alt/python38/lib64/python3.8/site-packages/cryptography/x509/__pycache__
🔄 Refresh
✏️
Editing: ocsp.cpython-38.pyc
Read Only
U v��f#N � @ sh d dl mZ d dlZd dlZd dlZd dlmZmZ d dlm Z d dl m Z m Z d dl mZ d dlmZmZmZ G dd � d ej�ZG d d � d ej�Ze je je je je jfZd d d�dd�Z G dd� dej�Z G dd� d�Z G dd� dej d�Z G dd� dej d�Z!G dd� dej d�Z"e �#e j � e"�#e j"� e!�#e j!� G d d � d �Z$G d d � d �Z%e j&Z&e j'Z'dS ) � )� annotationsN)�utils�x509)�ocsp)�hashes� serialization)� CertificateIssuerPrivateKeyTypes)�_EARLIEST_UTC_TIME�_convert_to_naive_utc_time�_reject_duplicate_extensionc @ s e Zd ZdZdZdS )�OCSPResponderEncodingzBy HashzBy NameN)�__name__� __module__� __qualname__�HASH�NAME� r r �I/opt/alt/python38/lib64/python3.8/site-packages/cryptography/x509/ocsp.pyr s r c @ s$ e Zd ZdZdZdZdZdZdZdS )�OCSPResponseStatusr � � � � � N) r r r � SUCCESSFULZMALFORMED_REQUEST�INTERNAL_ERRORZ TRY_LATERZ SIG_REQUIRED� UNAUTHORIZEDr r r r r s r �hashes.HashAlgorithm�None)� algorithm�returnc C s t | t�std��d S )Nz9Algorithm must be SHA1, SHA224, SHA256, SHA384, or SHA512)� isinstance�_ALLOWED_HASHES� ValueError)r r r r �_verify_algorithm/ s �r$ c @ s e Zd ZdZdZdZdS )�OCSPCertStatusr r r N)r r r ZGOOD�REVOKED�UNKNOWNr r r r r% 6 s r% c @ s( e Zd Zddddddddd�dd �Zd S ) �_SingleResponse�x509.Certificater r% �datetime.datetime�datetime.datetime | None�x509.ReasonFlags | None)�cert�issuerr � cert_status� this_update� next_update�revocation_time�revocation_reasonc C s t |tj�rt |tj�s td��t|� t |tj�s<td��|d k rXt |tj�sXtd��|| _|| _|| _|| _ || _ t |t �s�td��|t j k r�|d k r�t d��|d k r�t d��nHt |tj�s�td��t|�}|tk r�t d��|d k r�t |tj�s�td ��|| _|| _|| _d S ) N�%cert and issuer must be a Certificatez%this_update must be a datetime objectz-next_update must be a datetime object or Nonez8cert_status must be an item from the OCSPCertStatus enumzBrevocation_time can only be provided if the certificate is revokedzDrevocation_reason can only be provided if the certificate is revokedz)revocation_time must be a datetime objectz7The revocation_time must be on or after 1950 January 1.zCrevocation_reason must be an item from the ReasonFlags enum or None)r! r � Certificate� TypeErrorr$ �datetimeZ_certZ_issuer� _algorithmZ _this_updateZ _next_updater% r& r# r r Z ReasonFlagsZ _cert_statusZ_revocation_timeZ_revocation_reason) �selfr- r. r r/ r0 r1 r2 r3 r r r �__init__= s` � � � �� � ��z_SingleResponse.__init__N)r r r r: r r r r r( < s r( c @ s� e Zd Zeejdd�dd���Zeejdd�dd���Zeejdd�dd ���Zeejd d�d d ���Z ejd dd�dd��Z eejdd�dd���Z dS )� OCSPRequest�bytes�r c C s dS �z3 The hash of the issuer public key Nr �r9 r r r �issuer_key_hash� s zOCSPRequest.issuer_key_hashc C s dS �z- The hash of the issuer name Nr r? r r r �issuer_name_hash� s z OCSPRequest.issuer_name_hashr c C s dS �zK The hash algorithm used in the issuer name and key hashes Nr r? r r r �hash_algorithm� s zOCSPRequest.hash_algorithm�intc C s dS �zM The serial number of the cert whose status is being checked Nr r? r r r � serial_number� s zOCSPRequest.serial_number�serialization.Encoding��encodingr c C s dS )z/ Serializes the request to DER Nr �r9 rJ r r r � public_bytes� s zOCSPRequest.public_bytes�x509.Extensionsc C s dS )zP The list of request extensions. Not single request extensions. Nr r? r r r � extensions� s zOCSPRequest.extensionsN) r r r �property�abc�abstractmethodr@ rB rD rG rL rN r r r r r; � s" r; )� metaclassc @ s, e Zd Zeejdd�dd���Zeejdd�dd���Zeejdd�dd ���Zeejd d�d d ���Z eejd d�dd���Z eejd d�dd���Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Zeejdd�dd���Zeejdd�d d ���Zeejd d�d d ���Zd!S )"�OCSPSingleResponser% r= c C s dS �zY The status of the certificate (an element from the OCSPCertStatus enum) Nr r? r r r �certificate_status� s z%OCSPSingleResponse.certificate_statusr+ c C s dS �z^ The date of when the certificate was revoked or None if not revoked. Nr r? r r r r2 � s z"OCSPSingleResponse.revocation_timec C s dS �z� The date of when the certificate was revoked or None if not revoked. Represented as a non-naive UTC datetime. Nr r? r r r �revocation_time_utc� s z&OCSPSingleResponse.revocation_time_utcr, c C s dS �zi The reason the certificate was revoked or None if not specified or not revoked. Nr r? r r r r3 � s z$OCSPSingleResponse.revocation_reasonr* c C s dS �z� The most recent time at which the status being indicated is known by the responder to have been correct Nr r? r r r r0 � s z OCSPSingleResponse.this_updatec C s dS �z� The most recent time at which the status being indicated is known by the responder to have been correct. Represented as a non-naive UTC datetime. Nr r? r r r �this_update_utc� s z"OCSPSingleResponse.this_update_utcc C s dS �zC The time when newer information will be available Nr r? r r r r1 � s z OCSPSingleResponse.next_updatec C s dS �zu The time when newer information will be available. Represented as a non-naive UTC datetime. Nr r? r r r �next_update_utc� s z"OCSPSingleResponse.next_update_utcr< c C s dS r> r r? r r r r@ � s z"OCSPSingleResponse.issuer_key_hashc C s dS rA r r? r r r rB � s z#OCSPSingleResponse.issuer_name_hashr c C s dS rC r r? r r r rD � s z!OCSPSingleResponse.hash_algorithmrE c C s dS rF r r? r r r rG s z OCSPSingleResponse.serial_numberN)r r r rO rP rQ rU r2 rX r3 r0 r\ r1 r_ r@ rB rD rG r r r r rS � sH rS c @ sz e Zd Zeejdd�dd���Zeejdd�dd���Zeejdd�d d ���Zeejd d�d d ���Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Z eejdd�dd���Zeejd d�d d ���Zeejd d�d d ���Zeejd!d�d"d#���Zeejd$d�d%d&���Zeejd$d�d'd(���Zeejd)d�d*d+���Zeejd d�d,d-���Zeejd d�d.d/���Zeejd$d�d0d1���Zeejd$d�d2d3���Zeejdd�d4d5���Zeejdd�d6d7���Zeejd8d�d9d:���Zeejd;d�d<d=���Z eejd>d�d?d@���Z eejd>d�dAdB���Z ejdCddD�dEdF��Z dGS )H� OCSPResponsez#typing.Iterator[OCSPSingleResponse]r= c C s dS )z_ An iterator over the individual SINGLERESP structures in the response Nr r? r r r � responses s zOCSPResponse.responsesr c C s dS )zm The status of the response. This is a value from the OCSPResponseStatus enumeration Nr r? r r r �response_status s z OCSPResponse.response_statuszx509.ObjectIdentifierc C s dS )zA The ObjectIdentifier of the signature algorithm Nr r? r r r �signature_algorithm_oid s z$OCSPResponse.signature_algorithm_oid�hashes.HashAlgorithm | Nonec C s dS )zX Returns a HashAlgorithm corresponding to the type of the digest signed Nr r? r r r �signature_hash_algorithm" s z%OCSPResponse.signature_hash_algorithmr< c C s dS )z% The signature bytes Nr r? r r r � signature+ s zOCSPResponse.signaturec C s dS )z+ The tbsResponseData bytes Nr r? r r r �tbs_response_bytes2 s z OCSPResponse.tbs_response_byteszlist[x509.Certificate]c C s dS )z� A list of certificates used to help build a chain to verify the OCSP response. This situation occurs when the OCSP responder uses a delegate certificate. Nr r? r r r � certificates9 s zOCSPResponse.certificatesz bytes | Nonec C s dS )z2 The responder's key hash or None Nr r? r r r �responder_key_hashB s z OCSPResponse.responder_key_hashzx509.Name | Nonec C s dS )z. The responder's Name or None Nr r? r r r �responder_nameI s zOCSPResponse.responder_namer* c C s dS )z4 The time the response was produced Nr r? r r r � produced_atP s zOCSPResponse.produced_atc C s dS )zf The time the response was produced. Represented as a non-naive UTC datetime. Nr r? r r r �produced_at_utcW s z OCSPResponse.produced_at_utcr% c C s dS rT r r? r r r rU _ s z OCSPResponse.certificate_statusr+ c C s dS rV r r? r r r r2 f s z OCSPResponse.revocation_timec C s dS rW r r? r r r rX n s z OCSPResponse.revocation_time_utcr, c C s dS rY r r? r r r r3 v s z OCSPResponse.revocation_reasonc C s dS rZ r r? r r r r0 ~ s zOCSPResponse.this_updatec C s dS r[ r r? r r r r\ � s z OCSPResponse.this_update_utcc C s dS r] r r? r r r r1 � s zOCSPResponse.next_updatec C s dS r^ r r? r r r r_ � s z OCSPResponse.next_update_utcc C s dS r> r r? r r r r@ � s z OCSPResponse.issuer_key_hashc C s dS rA r r? r r r rB � s z OCSPResponse.issuer_name_hashr c C s dS rC r r? r r r rD � s zOCSPResponse.hash_algorithmrE c C s dS rF r r? r r r rG � s zOCSPResponse.serial_numberrM c C s dS )zR The list of response extensions. Not single response extensions. Nr r? r r r rN � s zOCSPResponse.extensionsc C s dS )zR The list of single response extensions. Not response extensions. Nr r? r r r �single_extensions� s z OCSPResponse.single_extensionsrH rI c C s dS )z0 Serializes the response to DER Nr rK r r r rL � s zOCSPResponse.public_bytesN) r r r rO rP rQ ra rb rc re rf rg rh ri rj rk rl rU r2 rX r3 r0 r\ r1 r_ r@ rB rD rG rN rm rL r r r r r` s� r` c @ sr e Zd Zddg fddddd�dd�Zd d d d d �d d �Zdddd d d�dd�Zddd d�dd�Zdd�dd�ZdS ) �OCSPRequestBuilderNzFtuple[x509.Certificate, x509.Certificate, hashes.HashAlgorithm] | Nonez5tuple[bytes, bytes, int, hashes.HashAlgorithm] | None�(list[x509.Extension[x509.ExtensionType]]r )�request� request_hashrN r c C s || _ || _|| _d S �N)�_request� _request_hash� _extensions)r9 rp rq rN r r r r: � s zOCSPRequestBuilder.__init__r) r )r- r. r r c C sZ | j d k s| jd k r td��t|� t|tj�r<t|tj�sDtd��t|||f| j| j �S )N�.Only one certificate can be added to a requestr4 ) rs rt r# r$ r! r r5 r6 rn ru )r9 r- r. r r r r �add_certificate� s � �z"OCSPRequestBuilder.add_certificater< rE )rB r@ rG r r c C s� | j d k s| jd k r td��t|t�s.td��t|� t�d|� t�d|� |j t |�ksj|j t |�krrtd��t | j ||||f| j �S )Nrv z serial_number must be an integerrB r@ z`issuer_name_hash and issuer_key_hash must be the same length as the digest size of the algorithm) rs rt r# r! rE r6 r$ r � _check_bytes� digest_size�lenrn ru )r9 rB r@ rG r r r r �add_certificate_by_hash� s( � �� �z*OCSPRequestBuilder.add_certificate_by_hash�x509.ExtensionType�bool��extval�criticalr c C sH t |tj�std��t�|j||�}t|| j� t| j | j | j|f��S �Nz"extension must be an ExtensionType) r! r � ExtensionTyper6 � Extension�oidr ru rn rs rt �r9 r r� � extensionr r r � add_extension s �z OCSPRequestBuilder.add_extensionr; r= c C s& | j d kr | jd kr td��t�| �S )Nz*You must add a certificate before building)rs rt r# r Zcreate_ocsp_requestr? r r r �build! s zOCSPRequestBuilder.build)r r r r: rw r{ r� r� r r r r rn � s � rn c @ s� e Zd Zdddg fddddd�dd�Zd d d d d d d dd d� dd�Zdd d d�dd�Zdd d�dd�Zddd d �d d �Zd d d!d"�d#d$�Ze d%d!d&�d'd(��Z dS ))�OCSPResponseBuilderNz_SingleResponse | Nonez5tuple[x509.Certificate, OCSPResponderEncoding] | Nonez list[x509.Certificate] | Nonero )�response� responder_id�certsrN c C s || _ || _|| _|| _d S rr )� _response� _responder_id�_certsru )r9 r� r� r� rN r r r r: ) s z OCSPResponseBuilder.__init__r) r r% r* r+ r, ) r- r. r r/ r0 r1 r2 r3 r c C s< | j d k rtd��t||||||||�} t| | j| j| j�S )Nz#Only one response per OCSPResponse.)r� r# r( r� r� r� ru ) r9 r- r. r r/ r0 r1 r2 r3 Z singlerespr r r � add_response6 s$ � �z OCSPResponseBuilder.add_responser )rJ �responder_certr c C sP | j d k rtd��t|tj�s&td��t|t�s8td��t| j||f| j | j �S )Nz!responder_id can only be set oncez$responder_cert must be a Certificatez6encoding must be an element from OCSPResponderEncoding) r� r# r! r r5 r6 r r� r� r� ru )r9 rJ r� r r r r� U s ��z OCSPResponseBuilder.responder_idz!typing.Iterable[x509.Certificate])r� r c C s\ | j d k rtd��t|�}t|�dkr.td��tdd� |D ��sHtd��t| j| j|| j �S )Nz!certificates may only be set oncer z certs must not be an empty listc s s | ]}t |tj�V qd S rr )r! r r5 )�.0�xr r r � <genexpr>p s z3OCSPResponseBuilder.certificates.<locals>.<genexpr>z$certs must be a list of Certificates) r� r# �listrz �allr6 r� r� r� ru )r9 r� r r r rh h s �z OCSPResponseBuilder.certificatesr| r} r~ c C sL t |tj�std��t�|j||�}t|| j� t| j | j | j | j|f��S r� ) r! r r� r6 r� r� r ru r� r� r� r� r� r r r r� y s �z!OCSPResponseBuilder.add_extensionr rd r` )� private_keyr r c C s6 | j d krtd��| jd kr$td��t�tj| ||�S )Nz&You must add a response before signingz*You must add a responder_id before signing)r� r# r� r �create_ocsp_responser r )r9 r� r r r r �sign� s �zOCSPResponseBuilder.signr )rb r c C s4 t |t�std��|tjkr$td��t�|d d d �S )Nz7response_status must be an item from OCSPResponseStatusz$response_status cannot be SUCCESSFUL)r! r r6 r r# r r� )�clsrb r r r �build_unsuccessful� s � z&OCSPResponseBuilder.build_unsuccessful) r r r r: r� r� rh r� r� � classmethodr� r r r r r� ( s � r� )(� __future__r rP r7 �typingZ cryptographyr r Z"cryptography.hazmat.bindings._rustr Z cryptography.hazmat.primitivesr r Z/cryptography.hazmat.primitives.asymmetric.typesr Zcryptography.x509.baser r r �Enumr r �SHA1�SHA224�SHA256�SHA384�SHA512r" r$ r% r( �ABCMetar; rS r` �registerrn r� Zload_der_ocsp_requestZload_der_ocsp_responser r r r �<module> s< � F+] F T}
💾 Save Changes
❌ Cancel